This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json) Hash identifier: wevU1lB6aGiH9fYnaQ89Y+PReM5wZIzmDsCGkIl2ZHc= Subject key identifier: 02:EC:7A:8F:E8:33:EE:CE:03:F1:04:1E:6F:D5:63:D2:F8:6E:D0:6B Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda Certificate serial: 019BFA2E3DC042401A3F58A4ED7F68D2098D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft Manifest number: 06D3 Signing time: Mon 26 Jan 2026 12:01:32 +0000 Manifest this update: Mon 26 Jan 2026 12:01:32 +0000 Manifest next update: Tue 27 Jan 2026 12:01:32 +0000 Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=) 2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: 0kGYzGw1OyetGdFOMYIg//0VKwEFJTWfO2PfmG7FGUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:3d:c0:42:40:1a:3f:58:a4:ed:7f:68:d2:09:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda Validity Not Before: Jan 26 12:01:32 2026 GMT Not After : Jan 27 12:01:32 2026 GMT Subject: CN=02ec7a8fe833eece03f1041e6fd563d2f86ed06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:09:43:3b:0a:00:ee:78:b6:30:fc:36:1c:96: 2d:d1:08:d4:1a:c0:49:a3:c8:22:8c:21:3f:51:b0: 24:d8:f9:b8:27:b6:e6:f5:fe:60:fd:e3:f7:fd:76: a1:91:fe:25:d7:6e:66:53:ce:82:5f:20:1f:fd:2d: 47:7e:9d:64:08:3c:3c:ff:08:7a:59:23:d3:f6:6c: f1:08:d7:82:52:89:a3:86:c9:8c:cd:05:bf:1c:14: c2:3a:c0:d8:90:52:b6:10:1c:f6:fd:a3:9c:e5:c4: bb:ff:5e:a0:0c:fd:7f:82:4a:43:0a:7f:77:f4:f3: 68:33:d8:d4:2f:65:ca:e1:81:27:7d:88:cc:91:ee: 28:e0:50:55:02:21:87:76:3b:21:00:63:bb:0e:67: f0:39:3a:b3:19:da:91:06:47:33:a1:a0:68:51:77: 05:d0:6e:a3:6d:2a:ac:d5:c7:03:ef:15:e7:85:ea: a3:e7:85:4a:74:8f:1b:6e:2f:09:16:10:51:8b:c5: 3e:69:60:01:01:be:24:0b:ac:3e:c5:73:93:4f:fd: 41:63:0c:9e:a0:c5:3e:51:f8:6b:55:dc:3e:06:c0: d4:1e:95:ed:3b:1e:f7:a3:a0:35:6a:cc:2b:e0:4a: 70:42:ec:9a:24:60:b6:b4:87:f5:b2:bc:a9:a4:cb: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EC:7A:8F:E8:33:EE:CE:03:F1:04:1E:6F:D5:63:D2:F8:6E:D0:6B X509v3 Authority Key Identifier: keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e0:04:91:ae:1d:77:b8:82:c6:8f:ad:ba:37:64:d8:da:23: 38:a5:e4:38:ac:fb:83:e7:dd:c1:58:4b:31:58:16:75:8e:bf: 51:63:10:00:f1:f3:7f:21:07:dc:f3:9a:29:da:61:34:07:ed: 01:bb:c3:9e:2a:e4:5e:26:b0:b6:32:1e:d7:8e:41:2e:10:af: a8:21:c6:98:61:e6:71:b0:30:96:63:60:5f:c7:f1:5c:b8:95: cc:2f:73:f1:34:78:fa:2d:f4:61:87:d7:92:1b:20:19:db:44: f1:83:2c:5a:e0:c2:8a:75:76:b4:82:54:5a:33:05:19:cc:38: 7c:22:18:90:5e:7c:80:7a:83:51:6a:d8:21:af:c9:07:e3:1d: 05:fa:34:d1:89:6f:9b:06:d1:36:27:64:95:20:7a:58:5c:5f: 4f:d2:19:15:6f:12:09:27:2f:e0:bb:cb:81:c7:9e:07:78:1a: 5a:f7:af:1b:66:41:73:0c:ae:70:e0:eb:56:3b:ad:b9:60:55: 8e:a7:da:bb:94:f3:c2:fe:40:83:cf:75:69:bf:04:d9:f9:93: a9:60:2a:dc:ca:80:38:46:f6:3e:01:e9:8c:62:9d:b0:88:4c: a3:3d:30:64:d2:21:07:53:59:fc:0c:fb:48:91:a0:4d:78:60: 06:b6:30:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lj3AQkAaP1ik7X9o0gmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk MDZkZGEwHhcNMjYwMTI2MTIwMTMyWhcNMjYwMTI3MTIwMTMyWjAzMTEwLwYDVQQD EygwMmVjN2E4ZmU4MzNlZWNlMDNmMTA0MWU2ZmQ1NjNkMmY4NmVkMDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAlDOwoA7ni2MPw2HJYt0QjUGsBJ o8gijCE/UbAk2Pm4J7bm9f5g/eP3/Xahkf4l125mU86CXyAf/S1Hfp1kCDw8/wh6 WSPT9mzxCNeCUomjhsmMzQW/HBTCOsDYkFK2EBz2/aOc5cS7/16gDP1/gkpDCn93 9PNoM9jUL2XK4YEnfYjMke4o4FBVAiGHdjshAGO7DmfwOTqzGdqRBkczoaBoUXcF 0G6jbSqs1ccD7xXnheqj54VKdI8bbi8JFhBRi8U+aWABAb4kC6w+xXOTT/1BYwye oMU+UfhrVdw+BsDUHpXtOx73o6A1aswr4EpwQuyaJGC2tIf1sryppMtboQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALseo/oM+7OA/EEHm/VY9L4btBrMB8GA1UdIwQY MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3 LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuAEka4d d7iCxo+tujdk2NojOKXkOKz7g+fdwVhLMVgWdY6/UWMQAPHzfyEH3POaKdphNAft AbvDnirkXiawtjIe145BLhCvqCHGmGHmcbAwlmNgX8fxXLiVzC9z8TR4+i30YYfX khsgGdtE8YMsWuDCinV2tIJUWjMFGcw4fCIYkF58gHqDUWrYIa/JB+MdBfo00Ylv mwbRNidklSB6WFxfT9IZFW8SCScv4LvLgceeB3gaWvevG2ZBcwyucODrVjutuWBV jqfau5Tzwv5Ag891ab8E2fmTqWAq3MqAOEb2PgHpjGKdsIhMoz0wZNIhB1NZ/Az7 SJGgTXhgBrYwtQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:18:29 2026 by rpki-client